last executing test programs: 9.806784106s ago: executing program 3 (id=1736): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) madvise(&(0x7f00003e0000/0x12000)=nil, 0x12000, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x0, 0x8}, {"add1ae4e72bd5cd8b0f89416da12583430e41cac"}}}}}}}) unlink(&(0x7f0000000040)='./file0\x00') 8.591896895s ago: executing program 3 (id=1740): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCFLUSH(r0, 0x20004268) r1 = getppid() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000080)) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000140)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4010, r2, 0x400) listen(r2, 0xdce6) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x2, 0x1, 0x21a10db700, 0x9, r1}) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r4, 0x400c5711, &(0x7f0000000240)) ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000000280)={0x7, 0x7fffffffffffffff}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f00000002c0)=0x9) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000300)=0x81) r5 = getppid() r6 = dup2(r0, r3) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x3, 0xff, 0xbd, 0x3ff}]}) ioctl$WSKBDIO_GETMAP(r6, 0xc010570d, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x1, 0x8, 0x8, 0x5, 0x1ff}, {0xdb, 0x2ef, 0xe, 0x7, 0x2}]}) fcntl$getown(r2, 0x5) sysctl$hw(&(0x7f0000000440)={0x6, 0x1}, 0x2, &(0x7f0000000480)="49cb929b4d6b9b7d6751756eae6c5558a71ca25070ee65836b2c834d1109d422765611251de661c4e48942a92c", &(0x7f00000004c0)=0x2d, &(0x7f0000000500)="2d36a99978b3569b5454f81d437b79073bb4458b51e977173b4098405077cb6a3ddcc69a5c14d45072e981ee26192faf95a3c40d807bf75f9f33fc96dd25faf1f2b2addc529ad701da9f3918e1da08aa68", 0x51) syz_extract_tcp_res$synack(&(0x7f0000000580)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x190, &(0x7f00000005c0)={@local, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x3, 0x1, 0x182, 0x66, 0x0, 0x8f, 0x61, 0x0, @local={0xac, 0x14, 0x0}, @loopback, {[@lsrr={0x83, 0x7, 0x4a, [@remote={0xac, 0x14, 0x0}]}]}}, @tcp={{0x0, 0x0, 0x41424344, r7, 0x0, 0x0, 0x1c, 0x4, 0x2, 0x0, 0x7ff, {[@mss={0x2, 0x4, 0x9}, @sack={0x5, 0x2a, [0x84a, 0xffffffff, 0x8, 0x4, 0xa149, 0x1cdb, 0x3, 0x8, 0x3, 0x30]}, @md5sig={0x13, 0x12, "ea41ec4633dc1259e31874af5b0e9dea"}, @sack={0x5, 0xa, [0x1, 0xcffd]}, @eol, @timestamp={0x8, 0xa, 0x61, 0x9c2e}, @mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x7}]}}, {"13753e584450ed50e2cf7ac9acc5719cab01dc960df82f817d3b8eb683b74e8e4bc725708e21755afb2acee6d78c3c36a0af7a8617d8e80034efbdee08b38e219d15ca68b7f7d9d9c427c09c0d7a96d68644d04f016da0471664b8c1d7d5e9303ba30833c2ece45019aec93e83faf837b443a8b4a8ad6ea9c9dfa5f728357be33ec1f2d4f9328018b0a97f1f8f9c444ff85064633eb5db806b5c034da7c4178f2dd01e558af0b3401bd3df04c7f288c297c0f8e74ae46f8fea5ae2c9451721aae95441825776c105cfb2955642e5688738be601b639edbc19e8e0af373d36bd5527cdfb25c9952594f911a3aaaca4510fa7442870c3a"}}}}}}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000780)=0x6a) close(r3) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f00000007c0)) fcntl$lock(r4, 0x8, &(0x7f0000000800)={0x1, 0x2, 0x0, 0x0, r5}) 8.543599585s ago: executing program 3 (id=1746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x4) r1 = kqueue() readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/173, 0xad}], 0x1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x40000000000005, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x8, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffc], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x8, 0xfffffffd, 0xffbffffd, 0xffc}, {0x1008, 0x0, 0x9, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0xfffffffffffffffe}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0x100000000}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) acct(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x3a, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x6, 0x2c, 0x68, 0x81, 0x1, 0x2, 0x0, @broadcast, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x4, 0xac, 0x3, 0x3}]}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xc000, 0x0, 0x3}}}}}}) acct(&(0x7f0000000080)='./file0\x00') sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000013c0)="04000000", 0x4) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r2) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000200)) 6.934699843s ago: executing program 3 (id=1766): kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8c, 0xfffff, 0x10, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x8000000000000002, 0x46ad}, {{}, 0xffffffffffffffff, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffd, 0x88, 0x1, 0xffffffff, 0x3}, {{}, 0xfffffffffffffffa, 0x35, 0x80, 0x9, 0xf4}, {{}, 0xffffffffffffffff, 0x6, 0x20, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x8d, 0x10, 0x2, 0xffffffff}, {{}, 0xffffffffffffffff, 0x28, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xdffdff7e, 0x1603528, "04e4577e010405010800", 0x200101, 0x5}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x5, 0x400003, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x11, 0x1000a}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x133}], 0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r3) 4.639540832s ago: executing program 3 (id=1778): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x101) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') rename(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000040)='./file1\x00') close(r0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) ioctl$TIOCDRAIN(r2, 0x2000745e) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0x0}, 0x1000) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) setgid(0xffffffffffffffff) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x20) setgroups(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)="dc", 0x1}], 0x1, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00') sysctl$kern(&(0x7f0000000100)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) 4.57378525s ago: executing program 3 (id=1780): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x0) accept(r0, 0x0, &(0x7f0000000300)) (async, rerun: 64) socket(0x6, 0x8000, 0x9) (async, rerun: 64) r1 = syz_open_pts() close(r1) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0xba1f, "07160a000000000000008a9000bcbdab526f00", 0x77b, 0x1}) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="b5", 0x1}], 0x1) (async) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000180)=0x4) (async, rerun: 32) r3 = dup2(r2, r1) (rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f00006c0000/0x4000)=nil, &(0x7f000014b000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000c47000/0x4000)=nil, &(0x7f0000690000/0x4000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x4}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000c1a000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0xf}, {&(0x7f000005b000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000807000/0x1000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x7}, {&(0x7f00002f6000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x10000}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000069c000/0x2000)=nil, 0x1}, {&(0x7f000015e000/0x3000)=nil, &(0x7f0000660000/0x2000)=nil}, {&(0x7f0000c1e000/0x3000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f00008cb000/0x7000)=nil, 0x8000000000000001}], './file0\x00', 0xfffffffd}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) ioctl$VNDIOCSET(r4, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (rerun: 32) ioctl$TIOCSTOP(r3, 0x2000746f) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xd143, 0xffff, 0xfffffffe, 0x7fc, "09000012000000bf0d16d70000008000", 0x4, 0x4000008}) (async) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) (async) r5 = kqueue() kevent(r5, &(0x7f00000000c0)=[{{r5}, 0xffffffffffffffff, 0x2, 0x80000000, 0x7, 0xb9e}], 0x40, 0x0, 0xa, 0x0) (async) kevent(r5, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000000c0)={'./file0\x00', 0x8, 0x5, 0x5, 0x0, 0x3, 0xb, 0x0, 0x2, 0x1, 0xb, 0x3}) (async) setitimer(0x1, &(0x7f0000000080)={{0x1000000000000, 0x8000000004}, {0x4, 0x3}}, 0x0) socket(0x1, 0x2, 0x1) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) getitimer(0x1, &(0x7f0000000000)) 2.267729981s ago: executing program 7 (id=1868): chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) truncate(&(0x7f00000004c0)='.\x00', 0x8000000000000001) setuid(0xee01) shmctl$IPC_RMID(0x0, 0x0) sysctl$kern(&(0x7f00000017c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000013c0)="04e73f00", 0x4) chroot(0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="b4f7ecf476", 0x5}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="050000003b12a840000074a3d1da00353e18e1eee3", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="68293a2c095c349174da74d191000000000000000008062b02080006040000aaaaaaaaaabbe00000020001c764fe9e0e1d9476d57f4f1046f2108bd0eabf321760091a77be53a616cf64434b06180785f87b55a894bbcf684e44c879812439a136c59de78f0644fd099674c1b4fee71279f5b4d9d86dfa1694455d07c945f2"]) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') rename(0x0, 0x0) mknod(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.162597066s ago: executing program 7 (id=1876): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.075744392s ago: executing program 7 (id=1880): bind$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x18, 0x4001, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$inet(r1, &(0x7f0000000000)='f', 0x1, 0x3, 0x0, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x1000, 0x9, 0x1, 0xfff, 0x0, 0xf06}, 0x0) sendmsg$unix(r0, 0x0, 0xc) setrlimit(0x3, &(0x7f00000000c0)={0x100000, 0x100000}) sysctl$kern(&(0x7f0000000040)={0x1, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000240)="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", 0x16c) 1.807458426s ago: executing program 5 (id=1894): recvfrom$unix(0xffffffffffffff9c, 0x0, 0x0, 0x800, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_pts() writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x2}, 0x8) r2 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r2, 0x29, 0x69, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r3 = dup(0xffffffffffffffff) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff9, 0x800, 0x2, 0x0, 0x4, 0x5, 0x7}, &(0x7f0000000040)={0xe, 0x101, 0x1000000006, 0x300, 0x9, 0x9, 0x865a, 0xffffffffffff458f}, 0x0, 0x0) acct(&(0x7f0000000080)='./file0\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5", 0x2}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0x6, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x2, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0x200000000000ac1e, 0x0, 0x89b7, 0x9, 0x7c, 0x5d, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) socket(0x18, 0x3, 0x0) 1.542086649s ago: executing program 6 (id=1899): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000553000/0x7000)=nil, &(0x7f000057e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f000071f000/0x3000)=nil, 0x200}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000049e000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000028b000/0x3000)=nil, 0x400e04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil, 0x8}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f000030b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1ffffffff}, {&(0x7f000003c000/0x4000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f0000561000/0x3000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0xfffffffc}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x7, 0xe5, 0x543, "22f00600000000e714db9b0e13edbe0000037600", 0x4, 0x2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000080)={0x800000000000003, 0x8, 0x0, 0xffffffffffffdfff}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000000c0)=0xad) ioctl$BIOCSETIF(r1, 0x4010427e, 0x0) fcntl$getown(r1, 0x5) 1.336755596s ago: executing program 1 (id=1910): sysctl$hw(&(0x7f0000000040)={0x7, 0x14}, 0x2, &(0x7f0000000080)="ba8946be575b", &(0x7f0000000000)=0x6, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) dup2(r2, r3) clock_getres(0x4, 0xffffffffffffffff) sysctl$kern(&(0x7f00000000c0)={0x1, 0x76dd7debdf2f1a05}, 0x2, &(0x7f0000000100)="7d9e8c8d04722afdb970be7f75c3bbd3dc7cc2ba8a12add58e03e5cc8c68fe74289804b382ed3b9d270289fb7049998624177632008a1583549a243772ab481ae525be1cac7f6118b75362916ba3d2d749088978aa0e387fbaceffcc71b44bf1ef4f731f48639bfce02eded1b0500b799a", &(0x7f0000000180)=0x71, &(0x7f00000001c0)="391a0ed4edf7ebfbb00c4e6cc577bdb26a1d7c3feb47008f14844b0a665508015f840570b05477f8446f286f94001bb0aac34f3e0ea78bcb3bb50c22adedd48e6d23daecc8ad1ddb4a530e3ef15b6e41ebc9713dbfa407cab371e91b78dc63522732281e784df578d4f2900c1c3b167cd2760db83a35de8b227569c6ba839db69f8aaf715db4ed7524cca5c1501f69f1cde82f66f094dfc3d44a9a95c6c744cdab1521180e567cb943b531489663fd373a61bcd59fe72d296014f86a4118af5af13570bbf55ecfec61a4f6005099df30f44943e7ef915000c578306b81f81d92b4d14831deb164fbe1108f191d052bf791d5", 0xf2) 1.336345622s ago: executing program 1 (id=1911): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7f, 0x0, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1}], 0x2, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) ktrace(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x17}, 0x2, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x0}, 0x8) 1.335393846s ago: executing program 1 (id=1912): mkdir(&(0x7f0000000240)='./file0\x00', 0x1) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f00000003c0)='./file0/file1\x00', 0x75) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='x\x00') chroot(&(0x7f0000000100)='./file0/file1\x00') unveil(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='c\x00') r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x6, 0x5, &(0x7f0000000080)="0bc2fa12907656a15b70205e27e191ffaa08f861fe33331251e37715cb021096ab99adbcca7ed48b430a3453a319dd65b54a77aca12299a215d24e0530ed02a8a052dc9fd4f2c2d77a92f3694fa37c77f2cc9cb121d2aca0888941a31e141cfbfbbde083f83ccdbc6c6ba24cfdb965d9d21cb5217ea4ad5a4b80c026d1ab98459816a1b5f4201f256051c4bd9ad8b0f09b242f3a88b9dc99ae44580320cca3f6e3b3e99a8d9c39ebb4b90d850abbef0414a8eeab6614ef", 0xb7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0xc) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x26) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) 1.334817372s ago: executing program 1 (id=1913): sysctl$kern(&(0x7f0000000200)={0x1, 0xa}, 0x2, &(0x7f00000008c0), 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc028445a, &(0x7f0000000100)={0x8, 0x0, 0x741, 0x10000002, "b3080deeaa8e70ec8c7b000000fffffff500", 0x900, 0x7}) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt(r1, 0x13aa0000, 0xfb4, &(0x7f0000000000)="43cb24316641faa8c9d98fc2b0ded35c120d52f782d0c29a628d5cd325bc91007c6bcde5e6fc4e9f7513566cd869c0ab9fbb6539ca418c715aecadb5f6bd3f12a37f8382df3b660f7c72d1099bf9472d79603c1b2fca8c42740d60fd47d10200ca5163096415c7be120b88fad750625f0c29a9135c62656bd7c627ad8fe3b4", 0x7f) 1.248337089s ago: executing program 1 (id=1914): bind$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) setrlimit(0x7, &(0x7f0000000480)={0x6, 0x100000001}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="5c8021", 0x3}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087", &(0x7f0000000000)=0x20, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getrlimit(0x4, &(0x7f0000000180)) syz_emit_ethernet(0x207, &(0x7f0000000640)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x1d1, 0x37, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, {[@hopopts={0x3, 0x15, '\x00', [@ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x13}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x9}, @generic={0xd7, 0x96, "d7a46f50fbae348ce51f8f04b2bb6929c6037f4330c41ed6fa804b3c9d5f0c8ac2ca1cf24984dcdd1fd8df1ec1a0ea9c292459b1c96b127e6ebe69a82b673a52a31a28ac73e65966c00a9365b0aed237a21a621f8573ae44d2d4fcc5afa86a6f48d831e97c01f1265ee9cbead8cd057ba877356d3cb7e32ffa98e5415ddaa0ee0b94d151d0f566a7200692ad981c115b3aec9f444cca"}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x6, 0x6, 0x0, @empty, @loopback, [], "202cb5361d604829ba17abd88e5823e93d05f84321055bfa39f1ebfc5374179b7e357e37afe339ffff7389d7aec1200dd3bc215a18104f22805694c043b3efdcb148242f198f401a93d755c45b53886fea7ca2f61f74335eb5679a0e4ed1bf30bbeca394407b9c728e69c2b0880b313b67a4a65a3ad1bcc4e9ac4dbff3c4f43fbfd84ba63395cc601505554010e0dcad760aa55e2070eff5e25453296d3a1e7c458d099d75f1c4ef3ebc6c20ed4ea42a2f42ec1a7a584eedef985f8c43ee6d19dbac3ceb66f6898653e6ab122d115d90886ed46abe13b5bb460c65a577c90dd717539aeaefe4ef574a"}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000880)={0x23d, 0x8000, {[0x4, 0xfffffffffffffff9, 0x8, 0x5, 0x3ff, 0x4ac, 0x8, 0x3, 0x4, 0x0, 0xac, 0x2, 0x14000000, 0x7, 0x6, 0x0, 0x1000, 0x3], [0x4, 0x3, 0x4, 0x8000, 0x4, 0x1, 0x1, 0xfff, 0x7fffffffffffffff, 0x7fffffffffffffff], [0x7, 0x6583, 0x2, 0x8, 0x7, 0x3, 0x800], [0x1, 0x9, 0xfff, 0x800, 0x7, 0x3], [{0xa, 0x7f, 0xffff, 0xffffffffffffff1d}, {0x6, 0xb, 0xffffffc0, 0x1}, {0x6, 0xcdb, 0x4, 0x2}, {0x7f, 0xb35, 0x4, 0xfffffffffffffff7}, {0xfffb, 0xfffffffd, 0x37cf, 0x6}, {0x101, 0xc, 0x6, 0x4}, {0x9, 0x9, 0x8, 0x631}, {0x8, 0x4, 0x40, 0x5}], {0x4, 0x800, 0x2, 0xfffffffffffff800}, {0x2, 0xd, 0x9, 0xffff}}}) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) rename(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) syz_open_pts() 1.246477487s ago: executing program 1 (id=1915): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) getrlimit(0x5, &(0x7f0000000140)) (async) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r0) close(r2) (async) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) shutdown(r2, 0x1) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) dup(r0) (async) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x40000000006}, {0x6, 0xfffffffffffffde2}}, 0x2) (async) fchown(r0, 0x0, 0x0) (async) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00') (async) close(0xffffffffffffffff) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f00000001c0)="22f5dc9b0de374fd74a519ba6afdb9817424363264a57c570711e23ae4f63f617b3519627ee1035dc07fefd01c8b3b874fb0baafe3b65c36d994a4d46c199779e4d892cf32402781447e2ff02ada79efa76ccf383975e6b1c942e2da726495d03eda68b86eafa74f960f764440207977bbd93b1f86220717c517377e67d1aa2d5353d1a174cdd6101d75b8082940273bf5adcfa10a2604c9d35adc3eb5d4f540c21912044caacf50f050af781000"/189, 0xbd) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r5 = syz_open_pts() close(r5) 995.567216ms ago: executing program 7 (id=1918): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7fff, 0x3, 0x9, 0x0, 0x5, 0xd87, 0x41, 0x1, 0x0, 0x100000000642, 0xffffffff}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x3cc) r3 = socket(0x18, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$BIOCSHDRCMPLT(r5, 0x80044275, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r5, 0x20004269) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000009}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) dup2(r2, r1) 993.643503ms ago: executing program 0 (id=1920): poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c, 0x20}], 0x1, 0x887e) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) execve(0x0, 0x0, 0x0) 931.195045ms ago: executing program 4 (id=1922): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) r2 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0xda) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) close(r5) r6 = kqueue() kevent(r6, &(0x7f0000000b80)=[{{r4}, 0xfff7, 0x41, 0x80, 0x51, 0x2}], 0x7fffffff, 0x0, 0x4, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x101, 0xffffff01, 0x8a38, 0xfffffffc, "070609000013160000050800"}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r7 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r7, 0x80146945, &(0x7f00000001c0)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) setitimer(0x0, &(0x7f0000000140)={{0x7eb, 0x2}, {0xffffffffffffffff, 0xfffe}}, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) syz_open_pts() 927.654625ms ago: executing program 5 (id=1924): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) r2 = getpgrp() mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x89, &(0x7f0000000180)={0xfffffffffffffff9, 0x81, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x10000000000000, 0x6, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x6, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x13, 0x0, 0x0) write(r1, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf) execve(0x0, 0x0, 0x0) 926.906241ms ago: executing program 0 (id=1925): r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) r1 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x8) mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000400)='./file1\x00', 0x2000, 0x0) unlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r2 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r4, 0x0) bind(r2, &(0x7f0000001880)=@in={0x2, 0x2}, 0xc) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800616f024e0fff6eee000000f0ffff2a612cecf3000000a91d749f00008aa94eba1fa1887b325322fa70a83151a72176e5168246d81734bf6ca32e19aa1832778055ed84ce5d24e11360e882ddcabb2c7529c167b25bac94"], 0x18}, 0x40f) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) unlink(&(0x7f0000000a40)='./file0\x00') r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0xfffffff6}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="b4f7ecf476cead6d7fa889d42987bf94e5bf47b4853067f003000000002443b0631d9a8faa01137846ab3bc4249e67600748cc0d18", 0x35}], 0x1) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) r6 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r6, 0x10}], 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 801.280141ms ago: executing program 6 (id=1927): sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x1e, 0x11, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_udp(&(0x7f0000000180)={0x4, 0x2, 0x11, 0x3}, 0x4, &(0x7f00000001c0)="8f0567bd01e7ef35b36a0d9598608d000ae7f0b8c4", &(0x7f0000000200)=0x15, &(0x7f0000000240)="dcd755326dfd0d54f31a33ebdb221f8d4f4491a3d83685b740e880bcedf123430b78b1a012b436286e75b95fb4e0e048a3c18f4419b869fd415bc9f2bb244932b545c1aa1a021a24b71301ec0af37a6215465c327037ea45cb808450c404a8271fd47126a08aad550d704b028ab24204f8632a3f0d74d20beaaea035827fd3b04ae2776134f1", 0x86) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0xfffffff7, 0x0, 0xc00002, "637447c1d100", 0x8000}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x8) r4 = dup(r3) ioctl$TIOCSETA(r2, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x0, "01d04b0a0047c1d100", 0xbd6, 0x6}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) pipe(&(0x7f0000000080)) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r7 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r7, 0x80206979, &(0x7f0000000000)) r8 = socket(0x18, 0x1, 0x0) setsockopt(r8, 0x1000000000029, 0x3b, &(0x7f0000000040)="2300bf98", 0x4) ioctl$VT_RELDISP(r4, 0x20007604, &(0x7f0000000300)=0x1) sendto$unix(r0, &(0x7f0000000080)="79b6d5a2e11dece541c36d08d0561d8e4d94a6fa1391ef4e9c81adc6d2700b5849d4f5d1a73053f0d1e7868bdce5008e769f4cef15293660349bf039bb3247a89f3d2d70cd08a9be24e99c959d29ddbb96244cfef159de3bce1bdd22e15219a2d3a309e4f20ec77e5d7a3a89c16ede98b6a52ae123a0dd56c873a73577ba5af6f73bd4bb8b1d4599d45b", 0x8a, 0x40e, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0xa) sendto$unix(r0, &(0x7f0000000340)="a484202a8aaf61f21c97", 0xa, 0x5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xa) 793.208638ms ago: executing program 2 (id=1928): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x3, 0xf, 0x3, 0x4006}, {0x6, 0xd, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_open_pts() syz_open_pts() r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x102f01, 0x2, 0x2, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x40000000000005, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x71, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x1000007d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x96}}}) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000080)='./file2/file0\x00') setregid(0xffffffffffffffff, 0x0) 791.377274ms ago: executing program 4 (id=1929): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r0, 0x2000000) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4687, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x6, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x3, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x20040000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$TIOCSETA(r1, 0xc4504446, &(0x7f0000000740)={0x6, 0x4, 0x2, 0x4, "a3ae02cf0a30c3336d02000ffb7dd5a80b546600", 0x28, 0x4042}) (async) r2 = socket(0x18, 0x3, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x2000, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$TIOCSTART(r1, 0x2000746e) (async) getsockname(r2, &(0x7f00000000c0)=@in6, &(0x7f0000000340)=0xc) (async) r4 = socket(0x24, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40) (async) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r1, 0x800c5709, &(0x7f0000000000)={0x5, 0x10001, 0xef16}) (async) r5 = kqueue() open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) syz_emit_ethernet(0x3e, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) kevent(r5, &(0x7f0000000000), 0x96, 0x0, 0xfffb4161, 0x0) (async) shutdown(r0, 0x0) 531.851286ms ago: executing program 5 (id=1930): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x2d, 0x2, 0x8}, {0x440, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)="441e10dffce20605fe89e3ca39af1dde3e115855eec1c272778e2ef4d65bb4c9651126c07c741328b0215d0e55567ecebbf389af88bf7d81c96046c4583e5822d00817a8a98fef4d51fc1ad88ec7fa6b", 0x50}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea3d710990a98e13b1e268a10337d31196968e11d0af3a0180bb310a87b44468c6354a519370cffd", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) 531.001135ms ago: executing program 2 (id=1931): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0x6b, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xfffff115, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x2000fff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0xffffffff, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800001, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x3, 0x6e2, 0x2, 0x1}, {0x3, 0x9, 0x3, 0x9}, {0x9be2, 0x1, 0x1000002, 0x8e}]}) syz_emit_ethernet(0x2a, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206997, &(0x7f00000001c0)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) dup2(r3, r2) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) setsockopt(r4, 0x400, 0x6, &(0x7f0000000180)="0af708849581ba8793b302255ded55316ccc403daebf0e9d27c174aa62a04c7a818308101ac7db46f0e769e2c9ad8055b1fde30b35915d460d5f5dbc2a1e812e522211b41c50bc023cd99bfe4008c36daaf512f3321dd0d2018d597f7cdd631f56b88c11aa74f8c09f3f174262e23caf25", 0x71) 528.141958ms ago: executing program 4 (id=1932): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) chroot(&(0x7f0000000040)='./file0/file0/../file0\x00') unveil(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000100)='W\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') 527.434113ms ago: executing program 5 (id=1933): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='l', 0x1}], 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) chroot(&(0x7f0000000240)='./file1\x00') r1 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x2b, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r3, 0x0, 0xffffffffffffffff) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000100)={0x20000b, 0x40002, 0x1, 0x2f, "cd00fd00", 0x0, 0x6}) ftruncate(r0, 0x6) utimes(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={{0x0, 0x4}, {0x1, 0x5339}}) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') 527.059058ms ago: executing program 6 (id=1934): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886bc", 0x3}], 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x44, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000540)="00041b000f3e8595043fc39fe5c627002ed9f2ef33ce3062d71f0b9e53c0a563020000000000000061d2183e8e55f133380e3b25f68b7a482242c732207200000000000000bfdd6f45e22e9fdb6d1f14a3aa8890bb6de9c6f1a6de751f40ac57c6d94a4f73b789b76880c800547378fc925db48b", &(0x7f0000000000)=0x50, 0x0, 0xfffffffffffffc79) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast1}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) socket(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffff, 0xc0, 0x7, 0x1, 0x0, 0xfffeffff, 0x2, 0x1, 0x1, 0x2004007, 0xf5}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = socket(0x18, 0x3, 0x4) ioctl$FIONREAD(r5, 0x81206919, &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)=@in6={0x18, 0x1, 0xb, 0x9}, 0xc, &(0x7f00000000c0), 0x0, 0x0}, 0x2}, 0x10, 0x4) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) r6 = socket(0x6, 0x1, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) 397.994105ms ago: executing program 0 (id=1935): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000140)={0xff, 0x5, 0x1}) fcntl$setstatus(r0, 0x4, 0xc0) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000100)='./file1\x00', 0xa1) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x5, 0x5, 0x1, 0x10000000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r2, 0x800c5707, &(0x7f0000000000)={0xff, 0x2, 0x8}) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) execve(0x0, 0x0, 0x0) 383.245974ms ago: executing program 5 (id=1936): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x0, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3ff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) setuid(0xee01) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwritev(r0, &(0x7f0000002740), 0x1000000000000362, 0x3fffe) 360.740032ms ago: executing program 2 (id=1937): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 32) shmget(0x2, 0x3000, 0x0, &(0x7f0000645000/0x3000)=nil) (rerun: 32) close(r0) socket(0x24, 0x2, 0x0) r1 = socket(0x18, 0x1, 0x0) shutdown(r1, 0x2) (async, rerun: 32) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) setsockopt(r0, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4) 359.633827ms ago: executing program 7 (id=1938): mkdir(&(0x7f0000000040)='./file0\x00', 0x2b) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="ed", 0x1) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0xc, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x7fd, 0x3, 0x1}, {0x3fe, 0x7fe, 0x1002802, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x4, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x41ac8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) readv(r3, &(0x7f0000000380), 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40f}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000000)={0x150, './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pledge(&(0x7f00000000c0)=']\xe5.(}\x00', &(0x7f0000000100)='/dev/zero\x00') ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000740)={0x7, 0x2, 0x8, 0x2, "01d04b0a0047c1d100", 0x9, 0x3}) 358.826843ms ago: executing program 2 (id=1939): getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r3 = getegid() chown(&(0x7f0000000000)='./file0\x00', r1, r3) r4 = msgget(0x0, 0x21c) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x8000, r1, r5, r1, r3, 0x71}, 0x1000, 0x2, r0, r0, 0x26d, 0x1, 0x8001, 0x100}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="db94f8c97d67", [{[], {0x8100, 0x5, 0x1}}], {@arp={0x806, @generic={0xf, 0x805, 0x6, 0x8, 0x8, @local, "10af07577703965e", @broadcast, "53c17b8ffb0957f03491df4ce2f20db7"}}}}) geteuid() getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@in6, &(0x7f0000000200)=0xc) recvmmsg(0xffffffffffffff9c, &(0x7f0000000700)={&(0x7f00000006c0)={&(0x7f0000000240)=@in, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/155, 0x9b}], 0x5, &(0x7f0000000640)=""/108, 0x6c}, 0xd4}, 0x10, 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740)) shutdown(r6, 0x0) getpeername(r6, &(0x7f0000000780)=@un=@file={0x0, ""/4089}, &(0x7f0000001780)=0xffb) r7 = open$dir(&(0x7f00000017c0)='./file0\x00', 0x2, 0x2) r8 = openat(r7, &(0x7f0000001800)='./file0\x00', 0x100, 0x44) pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) chown(&(0x7f0000001880)='./file0\x00', r1, r5) syz_extract_tcp_res$synack(&(0x7f00000018c0), 0x1, 0x0) fchmod(r8, 0x4) mknod(&(0x7f0000001900)='./file0\x00', 0x2, 0x2) getgroups(0x6, &(0x7f0000001940)=[r2, r5, r2, r3, r2, r5]) setgroups(0x7, &(0x7f0000001980)=[r10, r2, r2, r2, r2, r5, r3]) openat$vmm(0xffffffffffffff9c, &(0x7f00000019c0), 0x8, 0x0) sysctl$fs(&(0x7f0000001a00), 0x2, &(0x7f0000001a40)="995da3fba062d3075b5aba31ff1d2f1fd48f987c57edd18d1db49d180decb106c26d71e52d29aa553f83f14931548c732f41763c4f57cd5799c43e5b75e245dab9d873bead3a6f14fe166a3914a0c47c6b96648252d4409ec4549262ffb669f57f8e4d1843196233895315e85601579e0446346e60968b", &(0x7f0000001ac0)=0x77, &(0x7f0000001b00)="5c6b98545ea2e6d066892940d4544cbc8fcd7585f3ee2824ff2a8a4f89baf465882506226effadad422696aa1f66ad4678b11b5673dc93b7f8f399fc3b2ef5f096a8bcaa84d81f68c3a48e519eed002901afb7cd1840896bfac6d1bafb72237d4b", 0x61) sysctl$fs(&(0x7f0000001b80), 0x2, &(0x7f0000001bc0)="f69508360a1d660554d364bd4a663306efbd51a8ad5adbe06599fab93b26dfdfcea4df4883797ea92f05d49c1dff06daeb9fdde4fa17f186db3d116f2299e8d01bdd5945d57a2bc1f5b6b592796480b13d4106d9dc6dee4045133d40f62672358428909eb2b62df81266251398", &(0x7f0000001c40)=0x6d, &(0x7f0000001c80)="701680f165d4e2fcc5298d6bcaed495fa1b7fba42b73d39b3938fe2c1741657e56af3ac3ad1989db56bab4ec528fcac013aa074666c5564070", 0x39) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0xc) setgid(r11) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000001d40)={0x2, &(0x7f0000001d00)=[{0x7, 0x81, 0xff}, {0x7, 0x3, 0xfb, 0x8}]}) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0x66, &(0x7f0000001d80)={0x7, 0x0, 0x35, 0x3d88, 0x10001}, 0xc) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 315.036598ms ago: executing program 4 (id=1940): flock(0xffffffffffffffff, 0xa) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x24) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0xff) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f00000000c0)=0x2) pwrite(r0, &(0x7f0000000100)="43074b0167eac3660c5bef7f04a62b27a23f982e4aba3a2e5110c68c4358e1a71af01eb9360afc50868abc4e2c90852566488a266db45a0f39b1e012e0ad68c657259999b591885bcbc92c26f24047fc75bf5a65c0f5ac6ad58ba5d2a3fe8c65f65d9b382b62f34628d4eff0bde7c1704801cc924649139c24afb21d13db73886848f28576dcb5cb127ba33794c8d44654f0f5dbeeb86c1c7fd24c7f0cce743eab69074c0ee0fde9ef83d27676f1a82039a4477a440afe24d8c8d093e885c221f2cf96b278a8e77139234dd39721d72ff8857b746df9", 0xd6, 0x6) fchflags(r1, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000240)="c2c5499814461b46ddceb9dd1fdf746366f10acc4e5cf022719a496dc514b7c32c7a0a14826fffacd1900300", 0x2c}, {&(0x7f0000000280)="db9921fdf8fb701fecb9187491ab1dc5af7ad00966b5aef03010b5546ca35b515e601ea1f21341b3134c6f212eb7f818c290b162cfec36af43347f679c01017df41b4f0da6f301927cc5bbc81b36c81f358c8302349193b5e2050d3968b13427c509767c2651fcc02ffc8f6fc324dc2a05b30316dcfdaf2b7aad1e08c65f3b4ad2c733db704a57f0ee0a23302567a977f631b4f4c25eb0edc64eab9212f1960d323339bf38823ed36c4e5a1c425cef6c4baec0cfcd6a5c5bfddc71f8570ba1cac22491f2ed721ad2147298d3b7d75506ff5916972716e212fa3976f2", 0xdc}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="b4d214648fc4d28f010ee70224d000b59db78f2b1c231765a6c79d0ef3dc2b1d8622e587e0297b201cb6617e73ae33180fdcd891d1d1cbcec8d7f17072c1685f7a0cf325d7ec6aa081d6657137435cb6f3a32302e984bb5f4dd70bf11d0573b20fb508fa14d8efdb62c922d730538dbaa89265889a1b839a7ff1d217864faaf2daaf93bab7fafe6c2c7beec3c06ed8a51c572a8e1753e5c89544014c7fa7f332daf65724fa24ebd512defe73ca11d6779ad7d9fcb04d4d8a434e9219aed14ce62172db84cff8ee92e0f1dc258dbbbde4514d9aab0ba71b5fd3d1f9f82801e7", 0xdf}], 0x4) getsockopt(r1, 0x8, 0x6, &(0x7f0000000500)=""/164, &(0x7f00000005c0)=0xa4) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/137, 0x89}, {&(0x7f00000016c0)=""/27, 0x1b}, {&(0x7f0000001700)=""/180, 0xb4}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)=""/31, 0x1f}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002940)=""/134, 0x86}, 0x40) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) r3 = fcntl$dupfd(r1, 0x0, r2) renameat(r3, &(0x7f0000002ac0)='./file0\x00', r1, &(0x7f0000002b00)='./file0\x00') ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000002b40)={'./file0\x00', 0x4, 0x9, 0x400, 0x1, 0x1, 0x80, 0xb7, 0x1, 0x0, 0x5, 0x5}) ioctl$KDSETMODE(r1, 0x20004b0a, &(0x7f0000002bc0)) ioctl$TIOCSTAT(r1, 0x20007465, &(0x7f0000002c00)) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000002c80)={0x4, &(0x7f0000002c40)=[{0x0, 0x3, 0xe5, 0x7ff}, {0x4, 0x0, 0x9}, {0x0, 0x9, 0x5, 0xffffff3a}, {0x1000, 0xc, 0x4, 0x7fffffff}]}) msgrcv(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, ""/252}, 0x104, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002e00)}], 0x1, &(0x7f0000002e80)=""/181, 0xb5}, 0x2}, 0x10, 0x2, &(0x7f0000002fc0)={0x6, 0x8}) fchmod(r3, 0x14) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f0000003000)) writev(r3, &(0x7f0000003040), 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000003080)={0x98, 0x4, 0x0, 0x7fffffff, "23fb8b91325fa874559d7201800fb245964387ef", 0x40, 0x200}) ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f00000030c0)) r4 = msgget(0x0, 0x400) r5 = geteuid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000003100)={0x0, 0x0, 0x0}, &(0x7f0000003140)=0xc) r7 = getpid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000003180)={{0x5, r5, r6, 0x0, 0xffffffffffffffff, 0x71, 0x3}, 0x56d, 0x5, r7, 0x0, 0x81, 0x9, 0x0, 0x8}) 314.21009ms ago: executing program 5 (id=1941): r0 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r0, &(0x7f0000002100)={&(0x7f00000020c0)={&(0x7f0000000040)=@in, 0xc, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/4096, 0x1000}, 0x1}, 0x10, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="b4f7ecf476cead6d7fa889d42987bf94e5bf47b4853067f003000000002443b0631d9a8f", 0x24}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) setsockopt(r0, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) 246.488069ms ago: executing program 6 (id=1942): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000280)=0xa) (async) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000280)=0xa) write(r0, &(0x7f0000000240)="d814cfe4a4ecb304ee01004b3700", 0xe) r1 = socket(0x2, 0x3, 0x0) mknod(0x0, 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0x17, 0x2000007, 0x1, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x106, 0x4, 0x71000}, {0x9, 0x5, 0x20008, 0x7}, {0x8, 0x6, 0x923f, 0x1000009}, {0x3, 0x6, 0x4000e}, {0x401, 0x200329, 0x2800, 0x7}, {0x82, 0x27f6, 0x4, 0x99}, {0x9, 0x4, 0x4f8, 0x100006c}, {0x10000c, 0x80000801, 0x9, 0x4}, {0x2, 0x82, 0xc, 0x9}, {0x7, 0xfc, 0x4000005, 0x108a}, {0x1e6, 0x10005, 0x3, 0x6}, {0x7fe, 0x9, 0x8, 0xf17f}, {0xb90, 0x80, 0x200, 0xfffffffd}, {0x29a7171d, 0x3, 0x1, 0x10000005}, {0xfffffe00, 0x7, 0x4, 0xffffffff}, {0x0, 0x7, 0x1006, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0xc0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x1, 0x3be}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x1, 0x3be}, 0x0, 0x0, 0x0) close(r4) readv(r3, &(0x7f0000000640)=[{0x0}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mprotect(&(0x7f00000a4000/0x3000)=nil, 0x3000, 0x5) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96a", 0x2) (async) write(r5, &(0x7f00000004c0)="b96a", 0x2) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) socket(0x2, 0x3, 0x0) (async) socket(0x2, 0x3, 0x0) accept$unix(r3, &(0x7f0000000080)=@file={0x0, ""/42}, &(0x7f00000000c0)=0x2c) (async) accept$unix(r3, &(0x7f0000000080)=@file={0x0, ""/42}, &(0x7f00000000c0)=0x2c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIONREAD(r6, 0xc0206921, &(0x7f00000001c0)) 245.879128ms ago: executing program 2 (id=1943): r0 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/190) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/177) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1100) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x10001) write(r2, &(0x7f0000000580)="42c23acc8d16e89d2654921dbef3412e", 0x10) write(r2, &(0x7f0000000180)="11d7d070e33bec118353e564af51ce3e64", 0x11) unveil(0x0, &(0x7f0000000140)='r\x00') setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6a, 0x0, 0x0) recvfrom(r1, &(0x7f0000000180)=""/35, 0x23, 0x1, &(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x2}, 0x8) setreuid(0xee00, 0x0) r3 = getuid() chown(&(0x7f0000000040)='./file0\x00', r3, 0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) getpeername$inet(r1, &(0x7f0000000200), &(0x7f0000000340)=0xc) 245.134619ms ago: executing program 4 (id=1944): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000007, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x3, 0x2890, 0x100, 0x71002}, {0x6, 0x2009, 0x8000, 0x3}, {0x104, 0xf88, 0xffffffff, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0xe, 0x3, 0x27fd, 0x7}, {0x5, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x801, 0x8, 0x8}, {0x6, 0x5, 0x5, 0x9}, {0x6a75, 0xf721, 0x1000, 0x4}, {0x8, 0x8, 0xb, 0x3}, {0x408, 0x5, 0x8}, {0x6, 0x7, 0x3, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0xb, 0x4}, {0x0, 0x1, 0x1000, 0x30004}]}) (async) r1 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x77}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r2, 0x5) (async) ioctl$BIOCFLUSH(r0, 0x20004268) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0xa0) (async, rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (rerun: 32) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x11) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x2}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {}, {0x2}, {0x0, 0x10000}, {0x2}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x1}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x3}, {0x3, 0x100}, {}, {0x0, 0x7ff}, {0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xe}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 95.818675ms ago: executing program 0 (id=1945): setgid(0xffffffffffffffff) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x1, 0x26, 0x7, 0x2}, {0x60, 0x17, 0x10, 0xb}, {0xe, 0xa, 0x2, 0x4090000}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x4, 0x3, 0x3, 0xfffffffe}, {0x200, 0x7, 0x3, 0x5}, {0xba61, 0x79, 0xb, 0xfffffff9}, {0x4, 0x6, 0x9, 0x81}]}) setegid(0xffffffffffffffff) setregid(0x0, 0xffffffffffffffff) setuid(0xee01) setgid(0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[]) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000880)={{0x2, 0x0, r2, r3, r4, 0x20, 0x8000}, 0x6, 0x7864a6e6, 0x6}) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000080)={0x4, 0x3181}) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f0000000400)) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0x3}) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6608816a00180630fe8052020000000000000000000000bbf6"]) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0x100007fffffff}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xb}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffffdffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000688000/0x4000)=nil, &(0x7f000048d000/0x2000)=nil, 0xffd}], './file1\x00', 0xfffffffa}) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000440)="d9caa74f2b6dcf9b6cdfab654ce3b9ad93b26f57233da45e60f3c263f6094be76c3df1810f635562b88909e78d2931ebb0ce9425e44787a7293208b4e88caf8e84692b5fddcae98274225ece428b68e377b0f40f73f3319f01e83b19d58d3689b40251a4b8c8ada4d5cf95f9ec1409619f364777099064abcdd85d92e90746515ad2d7ae6bcc521df2495defe88c6347381af79e8312c84c1186df461d7d32c8fced626a6c911bd78ea3564d9890bcea0b5c92137a6a4ff7", 0xb8}, {&(0x7f0000000500)="94c6b76037809e21b9194fe4909b969db96ced48dd6a693be5f980fb8a245c0a6f48804db2bd8d082ae978d99c2716b75789f99943009a095cbaf26f6e7ab48008819040d8efccd3d3d22f6b74cdcb8bdbc48172579f778a252dd63a5f9f356d3fc6ff7e31b7f502eceed7720cbb57378df2881df27ac5ec2d5783254990001507426b993bd73fa6df30f4cd5564f800f3865c4d2e2c13f557e4f4cb0f7cc27dfdc24c773fd226dfa0ca4ce47b1cd1570b217fd6360386049aae", 0xba}, {&(0x7f00000005c0)="c5afd4353eda8e732f8f60755cdc90690bfeaf405647040c503b87e0e183c2a3259bc7ba50ee5098cfc2a0d47cc59ed14e17da01f791491d05e88093fb55076eea931eedb4b084322a06adea2f505f7bcb9e0bf63c7e0ad806625775c4dd7744c1307068514c620f3b177c2d7e91ee21a2dcefd9a0cbb585b5ca2adb370ef4b1f0adff4a4b911b083cc0861a8d0dd4bb63c1920f21103e43c67b8f56cd827618a731477e465d6a1775a7ccd2fbb1aa08413959bfbd12fcb19b25e5c4b784b15f4c6f0321dc4e3b36bda588d9ef176ee86d5fef5c46d17a8695a3036b4a12eacb7672f2b0b2841427f8d36320c5b39038ee2828cae17cfa", 0xf7}, {&(0x7f00000006c0)="7e02dd6faa446fdf344e156d674373f40713fe04cfe080ce97615f6fc63f41c3b545bce383ba9c13b297cd06d588767c9a64abcb0537c6846a0a46b8d1c749c4d2", 0x41}], 0x4) ioctl$VNDIOCCLR(r5, 0x80384601, &(0x7f0000000340)={&(0x7f00000002c0)='./file0\x00', 0x1ec3, &(0x7f0000000300)='./file1\x00', 0x8}) 95.145953ms ago: executing program 6 (id=1946): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x6, 0x4006}, {0x26, 0x9, 0x1, 0xfffffff2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x400}, 0x0) recvmmsg(r0, &(0x7f0000000040)={0x0, 0x20010000}, 0x10, 0x42, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1, 0x0}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)="2ea67c83ee080052265ec347cd3852914a90ff2ec3", 0x15}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc008441e, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) ioctl$WSDISPLAYIO_SBURNER(r3, 0x800c5751, &(0x7f00000000c0)={0x0, 0x80000000}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="a2352f75fcb72f258152ea33ef03d38fed57bf22", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r4 = open(&(0x7f0000000080)='./bus\x00', 0x8, 0x10) pread(r4, &(0x7f0000000040)="3cd1", 0x2, 0x0) 93.731889ms ago: executing program 0 (id=1947): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x3, 0x7, 0x7, 0x1}, {0x2, 0x43, 0x6, 0x1}, {0x9e, 0x0, 0x1, 0x8}, {0x1, 0x30, 0x7}, {0x401, 0x1, 0xf}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="b4f7ecf476cead6d7fa889d42987bf94e5bf47b4853067f003000000002443b0631d9a8faa011378", 0x28}], 0x1) sysctl$net_pipex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\a', 0x1) (async) sysctl$net_pipex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\a', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mlock(&(0x7f000001a000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[]) 18.46181ms ago: executing program 7 (id=1948): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = kqueue() r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCGET(r1, 0x84946467, &(0x7f00000003c0)={'./file0/file0\x00', 0x6c1, 0x3, 0xfffffffffffffff4}) kevent(r0, &(0x7f00000000c0), 0xbe96, 0x0, 0xffffffff, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0/file0\x00', 0x3ff, &(0x7f0000000080)='./file0/file0\x00', 0xe}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0xfffffff6}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x10}], 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x18, 0x3a, 0x29, @rand_addr="0000fbff78b00eac2470ff0f1de200", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0xba, '\x00', @empty}}}}}}) r5 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, 0xffffffffffffffff) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000040)='./bus\x00', 0x2, 0x100) 16.70691ms ago: executing program 4 (id=1949): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) r1 = getpid() setpgid(r1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) close(r0) sysctl$kern(&(0x7f00000002c0)={0x1, 0x29}, 0x2, &(0x7f0000000200)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000040)=0x60, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) (async) getpid() (async) setpgid(r1, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) (async) close(r0) (async) sysctl$kern(&(0x7f00000002c0)={0x1, 0x29}, 0x2, &(0x7f0000000200)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000040)=0x60, 0x0, 0x0) (async) 10.311656ms ago: executing program 0 (id=1950): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000040)) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000080)) r1 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000140)="8f62da07fd37d12c984f7a9eebe9324502ac88a5d63116b897843cf1753608bf3059a79b3e1027849d8ac3f37a08a36c0799578e34f0845bbe5ed80895bb005135e8065d3a60f3506db2a4d938ab7abdc77bd50e024371f0702d4d088bcdafdaac91c8ba81cfdde29927d1615bbc33aa78c708000c2d794e2daff527b212e71ea3041daa09408c6ee53158a5e4", 0x8d) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="e7cee13975cf3fa63294e0b31c2f4d12f401886c63faf9f2d2341c92defba77f84965181b45b8b92574cac6e9062931af05c80b5e1bdffa5a857366e4364d1bc7a3fc43118a14ac786faba4cce67676477bb444485bb792aaab996307e", 0x5d}], 0x1) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffff9c, 0x400c570a, &(0x7f00000002c0)) bind$inet(r1, &(0x7f0000000300)={0x2, 0x0}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8000, 0xc2) recvfrom$inet(r2, &(0x7f0000000380)=""/150, 0x96, 0x1040, &(0x7f0000000440)={0x2, 0x3}, 0xc) readv(0xffffffffffffff9c, &(0x7f0000000900)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/55, 0x37}], 0xa) r3 = dup(r1) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f00000009c0)={{0x18, 0x1, 0xffff, 0xa}, {0x18, 0x2, 0x9, 0x1}, 0x8001, [0x1, 0x8, 0x6d, 0x4, 0xffff, 0x3, 0x6, 0xd]}, 0x3c) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80105705, &(0x7f0000000a00)={0xfff, 0x52, 0x4, 0x3}) getpeername$inet(r1, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000ac0)={0x1}) setsockopt(r2, 0x5f44f77c, 0x5, &(0x7f0000000b00)="44c2c11e0082424e2e83bd69ef995f3cb5bfb62a704799e7008ad4ff0e746efbdd0741882e1fc9e6fabe081ac0137918fa57392504ebfeb504ff3d9fafcb0cc23cac41578bb98890a3c0cb3266033edf7b093de0877cbb8b65f983a1065aa0", 0x5f) fcntl$getflags(r0, 0x3) read(r0, &(0x7f0000000b80)=""/90, 0x5a) writev(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000c00)="c40d7c1be1eaa83ab2aebf8431a6f9c078670d6e02", 0x15}, {&(0x7f0000000c40)="6fcadcee3c6d6446ccdc6c8b890c39fc87176aa840e676bcb553f85f19da0a6705e5e88dca268201321a745d56127b3e8ace64c5ad87a6b935f3f1485534c0783fb8f22293afc8ec167f38354d611fa8a9f493c3b70e04b90c78683c63dcf25a09fb0de54bff03fe52663cae0dcee7b025bb18f355766bc162b9106f1df58e377411b6029ee6936e1a37932965ca7c92e8fe88d3c8201d69016dec7d8eb8dd2b70", 0xa1}, {&(0x7f0000000d00)="72f87050cea4071443c8068031fcd1b5634227d33e01156b429b452f79d90bcaa08ba302d67c2073614fd6636702e39a81a1fc6508af9e80e65cd83c1a85a5f50e6fa9b141a053d0f0599b84f0248bdb77b59e32dd892ef6592da64a61fbfdf0ac7983c711e4a825fc3149a6bad9b4361b4cebd7d77b04bfdb68cc57348a55a750253fe98978e7c074599c53cc77fd7f01a1da68f9b0729b1316bc87910865b431390e896ce497141660e88b04f80c5a299f1ab10834569f95113dbd5589b9a52b7180e6c1fa65f43f3f1428", 0xcc}, {&(0x7f0000000e00)="6badcb61409115947dc8f09c826a72a19699027ee6637c5e4f08e3225f0bf3a0471f82bc86386a539ca32ab15bae967b8a1fbd9858", 0x35}], 0x4) ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000e80)={'./file0\x00', 0x4, 0xfff}) r4 = openat(r3, &(0x7f00000012c0)='./file0\x00', 0xc99b80b1fb6ea7b8, 0x15) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000001300)) sendto$inet(r3, &(0x7f0000001340)="e0b312621f70a3aa126fe651f16c60922c05dddc7bde136c1a756965448c6dd5d537e32be977b87c11720769173e49814d8ca19161d4016a4f5aa01c93c27c8cca3276a8b28f3f6d9ee1c9730fd200c47a0f94a4f1196dbd0fb79e7675cb5486bb506e35508d975b2bf986f17a53990fed015755e1e648c78de6e68e74c0e0acce0dc5d5c032f98ba12d363ab95a7fcf49a61a0e5178ff9130", 0x99, 0x8, &(0x7f0000001400)={0x2, 0x3}, 0xc) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000001440)) getpgrp() open(&(0x7f0000001480)='./file0\x00', 0x0, 0x191) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000014c0), 0x80, 0x0) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000001540)={&(0x7f0000001500)='./file0\x00', r4, 0x1}) setgid(0x0) 9.798201ms ago: executing program 6 (id=1951): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket(0x2, 0x4, 0x7) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa6}) (async) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa6}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) fchmod(r1, 0xf3) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0xc) r2 = socket(0x18, 0x3, 0x0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 0s ago: executing program 2 (id=1952): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) getsockname$inet(r1, 0xffffffffffffffff, &(0x7f0000000500)) mprotect(&(0x7f0000579000/0x2000)=nil, 0x2000, 0x1) getdents(r0, &(0x7f0000003e80)=""/4106, 0x100a) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x5b) fchmod(r3, 0xff) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000005c0)=0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001e80)=""/4096, 0x1000) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, 0x0, 0x0, &(0x7f0000001440)="03", 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="5c8021", 0x3}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea3d710990a98e13b1e268a10337d31196968e11d0af3a0180bb310a87b44468c6354a519370cffd4607b6c29f0e9af8fc5bb91e", &(0x7f0000000000)=0x60, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 vm_create: uvm_map failed: 12 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 WARNING: thread `nfsio' (145824) exits with status -1 WARNING: thread `nfsio' (384455) exits with status -1 WARNING: thread `nfsio' (140299) exits with status -1 WARNING: thread `nfsio' (85216) exits with status -1 WARNING: thread `nfsio' (362946) exits with status -1 WARNING: thread `nfsio' (381429) exits with status -1 WARNING: thread `nfsio' (97157) exits with status -1 WARNING: thread `nfsio' (286869) exits with status -1 WARNING: thread `nfsio' (306466) exits with status -1 WARNING: thread `nfsio' (164179) exits with status -1 WARNING: thread `nfsio' (238254) exits with status -1 WARNING: thread `nfsio' (32785) exits with status -1 WARNING: thread `nfsio' (149961) exits with status -1 WARNING: thread `nfsio' (162502) exits with status -1 WARNING: thread `nfsio' (129445) exits with status -1 WARNING: thread `nfsio' (53883) exits with status -1 WARNING: thread `nfsio' (518637) exits with status -1 WARNING: thread `nfsio' (410273) exits with status -1 WARNING: thread `nfsio' (482707) exits with status -1 WARNING: thread `nfsio' (270264) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) pmap_unwire: wiring for pmap 0xfffffd806ca42f00 va 0x200000001000 didn't change! pckbd_enable: command error load: 6.48 not a controlling terminal pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error load: 7.87 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error       OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806ea89b78,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806ea89b60,1) at rw_do_enter_write+0xba rrw_enter(fffffd806ea89b60,1) at rrw_enter+0xc6 VOP_LOCK(fffffd800d2a0e78,2001) at VOP_LOCK+0xa3 vn_lock(fffffd800d2a0e78,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c4085f0) at vfs_lookup+0x11c namei(ffff80003c4085f0) at namei+0x7ca unp_connect(ffff8000013fa788,fffffd80608a8100,ffff80002a270548) at unp_connect+0x29d uipc_dgram_send(ffff8000013fa788,fffffd806b5b8c00,fffffd80608a8100,0) at uipc_dgram_send+0x163 sosend(ffff8000013fa788,fffffd80608a8100,ffff80003c408878,0,0,e) at sosend+0x804 sendit(ffff80002a270548,7,ffff80003c4089f8,e,ffff80003c408ab0) at sendit+0x5a5 sys_sendmsg(ffff80002a270548,ffff80003c408b60,ffff80003c408ab0) at sys_sendmsg+0x246 syscall(ffff80003c408b60) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xea762ced8d0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c408270 rbx 0 rdx 0 rcx 0xffff80002a270548 rax 0xffff8000299edff0 r8 0xffff80003c408150 r9 0x8080808080808080 r10 0xa0b53778c1f4d6b1 r11 0x61d764281ef4de63 r12 0xfffffd8003f3c8c0 r13 0xfffffd8004725340 r14 0x3 r15 0xffffffff8340ca16 substchar+0x822d rip 0xffffffff82bf18c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c408260 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=22175 pid=93634 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a271240,0xffff80002a2702c0 process=0xffff8000fffddd08 user=0xffff80003c403000, vmspace=0xfffffd806cb28018 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 39375 196147 56217 0 2 0x10 syz-executor 39375 125784 56217 0 2 0x4000010 syz-executor 39375 102261 56217 0 3 0x4000090 fsleep syz-executor 76820 480376 94333 0 2 0 syz-executor 93634 182776 78727 0 2 0 syz-executor *93634 22175 78727 0 7 0x4000000 syz-executor 20577 244372 26394 0 2 0 syz-executor 10583 361789 80993 0 2 0 syz-executor 10583 423604 80993 0 7 0x4000000 syz-executor 42454 115714 55141 0 3 0x80 nanoslp syz-executor 42454 482123 55141 0 3 0x4000080 kqsel syz-executor 42454 453487 55141 0 3 0x4000080 fsleep syz-executor 13927 387470 8946 0 3 0x3000 suspend syz-executor 13927 434106 8946 0 3 0x4081000 biowait syz-executor 13927 92702 8946 0 3 0x4081000 inode syz-executor 11387 173464 1 0 3 0x100083 ttyin getty 68532 265936 0 0 3 0x14200 acct acct 56217 266881 49343 0 2 0xc82 syz-executor 94333 366566 49343 0 3 0x82 nanoslp syz-executor 55141 410129 49343 0 3 0x82 nanoslp syz-executor 80993 362892 49343 0 3 0x82 nanoslp syz-executor 78727 300380 49343 0 3 0x82 nanoslp syz-executor 45018 463478 49343 0 3 0x82 wait syz-executor 8946 490218 49343 0 3 0x82 nanoslp syz-executor 26394 20334 49343 0 3 0x82 nanoslp syz-executor 49343 305895 87140 0 3 0x82 kqread syz-executor 87140 41644 85808 0 3 0x10008a sigsusp ksh 85808 400460 31967 0 3 0x98 kqread sshd-session 31967 441514 56513 0 3 0x92 kqread sshd-session 56513 480418 1 0 3 0x88 kqread sshd 34429 456454 63086 74 3 0x1100092 bpf pflogd 63086 360849 1 0 3 0x80 sbwait pflogd 83258 262780 60618 73 3 0x1100090 kqread syslogd 60618 303919 1 0 3 0x100082 sbwait syslogd 71586 272779 1 0 3 0x100080 kqread resolvd 48905 127451 33489 77 3 0x100092 kqread dhcpleased 22619 29148 33489 77 3 0x100092 kqread dhcpleased 33489 267884 1 0 3 0x80 kqread dhcpleased 94020 76587 0 0 2 0x40014200 smr 97315 410510 0 0 2 0x14200 zerothread 81126 40238 0 0 3 0x14200 aiodoned aiodoned 16299 515022 0 0 3 0x14200 syncer update 59882 10720 0 0 3 0x14200 cleaner cleaner 11829 153587 0 0 3 0x14200 reaper reaper 74497 210917 0 0 3 0x14200 pgdaemon pagedaemon 88157 62579 0 0 3 0x14200 bored viomb 66847 303703 0 0 3 0x40014200 acpi0 acpi0 96644 104780 0 0 3 0x40014200 idle1 12318 389846 0 0 3 0x14200 bored softnet1 34097 242452 0 0 3 0x14200 bored softnet0 74003 254650 0 0 3 0x14200 bored systqmp 90586 36263 0 0 3 0x14200 bored systq 58664 105016 0 0 3 0x14200 tmoslp softclockmp 95028 75281 0 0 3 0x40014200 tmoslp softclock 79837 314334 0 0 3 0x40014200 idle0 1 346672 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 93634 (syz-executor) thread 0xffff80002a270548 (22175) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83949d88) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 pool_get+0x27e #3 namei+0xdf #4 unp_connect+0x29d #5 uipc_dgram_send+0x163 #6 sosend+0x804 #7 sendit+0x5a5 #8 sys_sendmsg+0x246 #9 syscall+0xbd4 #10 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000013fa970) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 10583 (syz-executor) thread 0xffff80002a2714d8 (423604) shared rwlock vmmaplk r = 0 (0xfffffd806cb286d0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 kpageflttrap+0x2f4 #6 kerntrap+0x19c #7 alltraps_kern_meltdown+0x7b #8 copyout+0x64 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 13927 (syz-executor) thread 0xffff80003c4bea98 (434106) exclusive rrwlock inode r = 0 (0xfffffd806ff98558) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10263 11284K 11863K 166960K 14489 0 pcb 18 18K 19K 166960K 642 0 rtable 180 11K 12K 166960K 722 0 pf 38 18K 19K 166960K 235 0 ifaddr 33 5K 8K 166960K 172 0 ifgroup 63 2K 3K 166960K 299 0 sysctl 4 1K 9K 166960K 21 0 counters 70 37K 38K 166960K 364 0 ioctlops 0 0K 4K 166960K 1941 0 iov 0 0K 20K 166960K 126 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1488 94K 94K 166960K 3146 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 107 0 dirhash 12 2K 3K 166960K 63 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 110K 166960K 2137 0 sigio 0 0K 0K 166960K 119 0 proc 72 115K 164K 166960K 880 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 418 0 in_multi 63 4K 7K 166960K 243 0 ether_multi 1 0K 0K 166960K 41 0 mrt 3 0K 0K 166960K 23 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 860 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 5 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 155K 175K 166960K 21406 0 UVM aobj 136 18K 18K 166960K 139 0 pinsyscall 43 86K 106K 166960K 3404 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 200 0 NDP 13 0K 1K 166960K 123 0 temp 83 8676K 8749K 166960K 88038 0 kqueue 13 20K 32K 166960K 452 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 241 0 238 2 1 1 2 0 8 0 rtentry 176 211 0 149 6 0 6 6 0 8 0 unpcb 144 1496 0 1476 12 11 1 4 0 8 0 syncache 336 13 0 13 4 4 0 1 0 8 0 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 1258 0 1252 41 37 4 13 0 8 3 arp 136 31 0 22 1 0 1 1 0 8 0 inpcb 328 3146 0 3134 39 35 4 15 0 8 2 nd6 152 38 0 24 1 0 1 1 0 8 0 pkpcb 40 112 0 112 6 5 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 5 0 5 4 4 0 1 0 8 0 ppxss 1192 123 0 123 4 3 1 1 0 8 1 pppxif 1504 11 0 11 6 6 0 1 0 8 0 pffrag 232 24 0 15 1 0 1 1 0 482 0 pffrnode 88 20 0 11 1 0 1 1 0 8 0 pffrent 40 41 0 32 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 152 0 69 1 0 1 1 0 8 0 pfstkey 128 152 0 69 3 0 3 3 0 8 0 pfstate 448 152 0 69 11 0 11 11 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 4 0 4 2 2 0 1 0 8 0 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 1026 0 724 32 13 19 29 0 8 0 art_table 40 1031 0 724 5 0 5 5 0 8 0 art_node 32 206 0 149 1 0 1 1 0 8 0 sysvmsgpl 40 16 0 8 1 0 1 1 0 8 0 semupl 112 3 0 3 3 3 0 1 0 8 0 semapl 112 100 0 90 1 0 1 1 0 8 0 shmpl 112 130 0 2 4 0 4 4 0 8 0 dirhash 1024 51 0 34 3 0 3 3 0 8 0 dino2pl 256 5604 0 4095 96 0 96 96 0 8 0 ffsino 296 5604 0 4095 118 0 118 118 0 8 0 nchpl 144 8580 0 6875 64 0 64 64 0 8 0 rtmask 32 30 0 30 8 7 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 30057 0 30056 4 3 1 1 0 8 0 percpumem 16 197 0 147 1 0 1 1 0 8 0 vcpupl 3968 5 0 0 1 0 1 1 0 8 0 vmpool 840 6 0 1 2 1 1 1 0 8 0 kstatmem 264 200 0 170 3 0 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 15 0 15 8 7 1 1 0 8 1 scxspl 216 47416 0 47415 15 14 1 8 1 8 0 plimitpl 152 605 0 587 1 0 1 1 0 8 0 sigapl 424 2474 0 2425 8 1 7 8 0 8 0 knotepl 120 568 0 0 17 0 17 17 0 8 0 kqueuepl 224 1176 0 1165 18 16 2 5 0 8 1 pipepl 344 311 0 284 3 0 3 3 0 8 0 fdescpl 528 2434 0 2402 3 0 3 3 0 8 0 filepl 160 17440 0 17214 30 17 13 21 0 8 1 lockfpl 104 856 0 853 1 0 1 1 0 8 0 lockfspl 48 366 0 363 1 0 1 1 0 8 0 sessionpl 144 34 0 25 1 0 1 1 0 8 0 pgrppl 48 65 0 47 1 0 1 1 0 8 0 ucredpl 104 2914 0 2898 1 0 1 1 0 8 0 zombiepl 144 2554 0 2552 1 0 1 1 0 8 0 processpl 1232 2474 0 2425 6 1 5 6 0 8 0 procpl 664 5899 0 5842 8 2 6 8 0 8 0 sosppl 176 19 0 19 3 2 1 1 0 8 1 sockpl 752 5047 0 5011 54 47 7 20 0 8 2 mcl64k 65536 10 0 0 2 0 2 2 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 1 14 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 38 0 0 5 0 5 5 0 8 0 mtagpl 96 89 0 0 3 0 3 3 0 8 0 mbufpl 256 1283 0 0 79 0 79 79 0 8 0 bufpl 280 17403 0 11266 439 0 439 439 0 8 0 anonpl 32 11283 0 0 91 0 91 91 0 246 0 amapchunkpl 152 75175 0 74600 56 28 28 34 0 158 3 amappl16 200 7670 0 7597 72 57 15 26 0 8 7 amappl15 192 25 0 25 1 1 0 1 0 8 0 amappl14 184 6 0 6 1 1 0 1 0 8 0 amappl13 176 472 0 471 1 0 1 1 0 8 0 amappl12 168 2851 0 2810 3 0 3 3 0 8 0 amappl11 160 6 0 5 1 0 1 1 0 8 0 amappl10 152 58 0 44 1 0 1 1 0 8 0 amappl9 144 257 0 256 2 1 1 1 0 8 0 amappl8 136 28 0 25 1 0 1 1 0 8 0 amappl7 128 152 0 151 1 0 1 1 0 8 0 amappl6 120 327 0 313 1 0 1 1 0 8 0 amappl5 112 79 0 68 1 0 1 1 0 8 0 amappl4 104 476 0 446 1 0 1 1 0 8 0 amappl3 96 12986 0 12894 4 1 3 3 0 8 0 amappl2 88 2606 0 2528 2 0 2 2 0 8 0 amappl1 80 19518 0 18922 14 0 14 14 0 8 0 amappl 88 20221 0 20052 5 0 5 5 0 92 0 uvmvnodes 80 176 0 0 4 0 4 4 0 8 0 dma65536 65536 2 0 2 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 3 3 0 1 0 8 0 dma128 128 259 0 259 6 6 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 138 0 3 3 0 3 3 0 8 0 uaddrrnd 24 2434 0 2402 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2434 0 2402 1 0 1 1 0 8 0 vmmpekpl 168 20503 0 20456 3 0 3 3 0 8 0 vmmpepl 168 159190 0 157158 127 28 99 107 0 357 3 vmsppl 488 2433 0 2402 6 1 5 5 0 8 0 rwobjpl 80 42681 0 41385 35 3 32 33 0 8 0 pdppl 4096 4887 0 4811 122 46 76 87 0 8 0 pvpl 32 19196 0 0 155 0 155 155 0 265 0 pmappl 256 2439 0 2403 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 434 0 113 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83884ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83949b80) at __mp_lock+0x192 intr_handler(ffff80003c44cc20,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x56 uvm_map_lookup_entry(fffffd806cb285d0,f1000,ffff80003c44cf68) at uvm_map_lookup_entry+0x133 uvmfault_lookup(ffff80003c44cf40,0) at uvmfault_lookup+0x133 uvm_fault_check(ffff80003c44cf40,ffff80003c44cf78,ffff80003c44cfb0,0) at uvm_fault_check+0x4f uvm_fault(fffffd806cb285d0,f1000,0,2) at uvm_fault+0x106 kpageflttrap(ffff80003c44d0f0,f1340) at kpageflttrap+0x2f4 kerntrap(ffff80003c44d0f0) at kerntrap+0x19c alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyout() at copyout+0x64 syscall(ffff80003c44d530) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdb2b59bbf40, count: -17 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806ea89b78,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806ea89b60,1) at rw_do_enter_write+0xba rrw_enter(fffffd806ea89b60,1) at rrw_enter+0xc6 VOP_LOCK(fffffd800d2a0e78,2001) at VOP_LOCK+0xa3 vn_lock(fffffd800d2a0e78,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c4085f0) at vfs_lookup+0x11c namei(ffff80003c4085f0) at namei+0x7ca unp_connect(ffff8000013fa788,fffffd80608a8100,ffff80002a270548) at unp_connect+0x29d uipc_dgram_send(ffff8000013fa788,fffffd806b5b8c00,fffffd80608a8100,0) at uipc_dgram_send+0x163 sosend(ffff8000013fa788,fffffd80608a8100,ffff80003c408878,0,0,e) at sosend+0x804 sendit(ffff80002a270548,7,ffff80003c4089f8,e,ffff80003c408ab0) at sendit+0x5a5 sys_sendmsg(ffff80002a270548,ffff80003c408b60,ffff80003c408ab0) at sys_sendmsg+0x246 syscall(ffff80003c408b60) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xea762ced8d0, count: -15